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REMARKS 

Claims 1-22 are still pending in this application. Claims 23-26 have been added. 
Reconsideration of tlie application is earnestly reqtiested. The Examiner has rejected all claims 
1-22 under section 103 in view otHailpem. Tso and Trcka. Although the Examiner's arguments 
have been carefully considert^. Applicant respectfully traverses these rejections as explained 
below. 

The Present Invention 

As pointed out in the Reply filed December 7, 2004 antivirus software downloaded from 
an antivirus scanning server runs on end user's computers and collects virus data» A central 
server then collects such virus data from each user's computer, consolidates the virus data, and 
creates virus tracking information that may be viewed on a display by any party. The Examiner's 
attention is directed toward the remaining discussion of the present invention in that Reply; for 
brevity, it is not repealed here. 

The Cited Art Distinguished 

The two cited primary references, U.S. Patent No. 6,275,937 issued to Hailpern er al 
(Hailpern) and U.S. Patent No. 6,088,803 issued to Tso et aL (Jso), both describe a technique by 
which content downloaded from the Internet is first scanned by anti-virus software on a server 
before it reaches an end user's computer. These references do not disclose actually scanning an 
end user's computer. 

In the "Response to Arguments" of the final office action at page 2, the action contends 
that "virus scanning of the client computers" is taught by Hailpern. That paragraph of the final 
action uses the phrases "results of the virus scan that was performed for each of the clients," and 
"the scan that was performed with respect to each of the client computers.'* Applicant would like 
to emphasize that claim 1 requires "virus scanning of the client end-user computers," and "results 
of the virus scanning on each client end-user computer." In other words, the claim 
unambiguously n^uires that the client computers themselves are scanned. The language of the 
final action seems to suggest that the Hailpern reference need only show scanning on behalf of a 
client computer or scanning performed respect to a client computer. 
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In feet the cited portion of Hailpcm at column 4 only shows a client computer making a 
request that incoming Internet data be scanned, not that the client computer itself be scanned; the 
cited portion at column 10 only shows that a requester could itself scan the incoming Internet 
data, not that the client computer itself will be scanned; and the cited portions at columns 12 and 
14 only indicate that data from a particular URL is scanned, not that a client computer itself is 
scamied. For all these reasons. Applicant continues to stress that Uailpem does not teach or 
suggest vims scanning of a client end-user computer that produces a scan log which can then be 
sent back from that client end-user computer over a distributed computer network to a virus 
tracking server as required by claims 1 in 12 and which is argued more specifically in the 
previous Reply. 

Regarding the Tso reference. Applicant understands the Examiner's position that the 
network device 4 should be considered a client computer although Applicant does not agree with 
this interpretation. In order to clarify the nature of the invention. Applicant has insened the teim 
-end-user" to modify "client computer" in the independent claims. Therefore, network device 4 
is not an end-user cliem computer even though it includes a virus checker. Further, cliem 
computer 12 while it may be an end-user computer, does not have virus scanning performed 
upon it. does not create a scan log of scamiing results, and certainly does not send back a scan 
log over a distributed computer network to a virus tracking server. For all these reasons. 
Applicant continues to stress that the Tso reference does not teach the third and fourth elements 
of claims 1 and 12 as explained in detail in the previous Reply. 

Now Claims 23-26 

New claims 23 and 25 emphasize one advantage of an embodiment of the present 
invention in that the virus tracking information, because it is derived from the scan log 
information from all of the client end-user computers, can identify concentrations of computer 
viruses at particular locations and throughout regions. 

New claims 24 and 26 emphasize that the virus tracking information is derived from the 
scan log information by first aggregating the scan logs from all of the client end-user computers 
and then using that information to produce the virus tracking information. 
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For these reasons, ii is respectfuUy noied that there is no prima fecie case of obviousness, 
and it is requested that the rejection of claims 1-22 be withdrawn. Although it may be amoot 
point. Applicant points out that although the conclusion of the fmal office action states that 
applicant had amended claims, in fact there had been no amendments to the claims. 
Reconsideration of this application and issuance of aNotice of Allowance at an early date are 
respectftilly requested. If the Examiner believes a telephone conterence would in any way 
expedite prosecution, please do not hesitate to telephone the undersigned at (612) 252-3330. 

litted, 
Thomas 




JcJiathan O. Scon 
Registration No. 39,364 




BEYER WEAVER &■ ThOMAS, LLP 
P.O. Box 778 
Berkeley, CA 94704-0778 
Telephone: (612) 252-3330 
Facsimile: (612) 825-6304 
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